Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa
File:                     3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa (raw, json)
Hash identifier:          9mzcKJUNJYi142YarYiARrR/Z5/NAszH3OfU+haPNRc=
Subject key identifier:   8C:90:54:9C:37:7E:08:8F:84:1A:42:C6:0B:38:20:84:D6:E4:59:5B
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       626AF14EF0AA7D83375C785626A4447A560216CE
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa
Signing time:             Tue 04 Feb 2025 18:49:28 +0000
ROA not before:           Tue 04 Feb 2025 18:44:28 +0000
ROA not after:            Tue 03 Feb 2026 18:49:28 +0000
asID:                     52268
IP address blocks:        190.113.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 01:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6a:f1:4e:f0:aa:7d:83:37:5c:78:56:26:a4:44:7a:56:02:16:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Feb  4 18:44:28 2025 GMT
            Not After : Feb  3 18:49:28 2026 GMT
        Subject: CN=8C90549C377E088F841A42C60B382084D6E4595B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:3f:8b:35:70:fd:e7:6f:15:c1:7d:a6:4c:
                    77:b1:ec:8d:9c:cf:b4:90:38:43:db:c5:5f:1d:6d:
                    1c:6f:92:9b:67:9e:db:aa:44:91:6f:bf:bf:bd:80:
                    a2:d6:8a:ad:89:b3:1d:e4:9f:6f:5e:7c:4b:de:cf:
                    f9:df:2f:1c:30:e8:7c:ab:e2:b3:d3:f1:ba:5f:6a:
                    7a:b3:54:4a:0d:51:47:02:b7:5f:37:f8:da:8f:d6:
                    66:9c:78:b5:6a:26:d4:6a:c5:6c:a4:b1:3e:dc:32:
                    a9:1f:02:6c:9b:54:3e:a3:1b:3e:b7:d2:33:aa:a9:
                    32:00:21:e6:a7:bc:3e:0e:b4:5b:2f:da:79:77:f9:
                    d7:70:03:1d:38:b7:83:32:00:a7:ec:25:5b:bd:d1:
                    6b:5b:19:de:aa:bc:89:4b:ee:c6:e5:73:15:02:36:
                    6c:4e:79:a8:74:d3:43:06:e0:e0:ac:be:d0:03:01:
                    7d:d0:6d:5c:e1:0f:ec:39:5e:9f:46:1a:fb:c7:f8:
                    3c:e4:22:5b:cc:65:d8:5e:f6:ee:e4:bd:de:a7:60:
                    3e:a2:60:8b:e0:d5:86:f7:c8:ec:b0:b6:a0:37:f8:
                    8d:94:f8:cb:50:36:91:b1:d9:52:e6:98:50:7d:d3:
                    c1:d0:d7:21:0e:88:71:af:b3:e7:45:5e:a2:93:79:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:54:9C:37:7E:08:8F:84:1A:42:C6:0B:38:20:84:D6:E4:59:5B
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:50:f2:32:e7:60:9a:fc:c9:c3:5c:af:3a:8d:9d:b2:2e:40:
         60:d0:59:a2:4c:3c:ab:2f:96:4e:eb:1c:c6:f4:dd:73:40:03:
         55:75:af:ba:43:a9:0d:54:75:bb:d2:04:d5:c9:7d:57:ef:fd:
         05:ae:f9:1b:9c:0e:a0:cc:5e:95:19:4a:3a:3f:86:80:07:4d:
         c7:b5:f2:2b:1f:61:1c:a4:d1:f3:80:16:12:6b:98:87:c5:dc:
         56:d8:43:fd:b4:7d:99:5b:ab:74:ba:cb:9c:d8:22:6b:27:ce:
         d6:22:34:fe:ad:c0:05:d0:3a:33:34:ca:c4:64:85:30:27:62:
         85:11:23:a9:9f:9a:ea:5d:80:93:f3:45:c1:a9:bb:d4:4d:9c:
         33:48:07:58:2b:90:b6:00:9f:2a:62:c7:40:56:ea:57:c2:69:
         19:40:25:f3:40:b4:d9:a1:cc:57:a3:65:46:44:20:b7:87:59:
         24:8d:70:1e:9b:9f:24:62:b9:0e:7e:a2:56:73:5f:3b:6d:5d:
         67:4d:76:81:ed:40:c7:75:e0:e6:8f:37:3e:6e:45:79:13:38:
         c2:cf:10:f7:09:84:4b:ac:60:3b:e4:ac:94:61:d7:b7:8f:0d:
         7d:00:7a:39:48:d6:19:0c:64:70:c0:b9:76:7d:4c:8d:6f:07:
         1e:b5:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:35:35 2025 by rpki-client